topic Re: threshold values for SNMP Monitoring PA-5250 in General Topics

threshold values for SNMP Monitoring PA-5250

regioiT — Thu, 11 Apr 2019 12:49:47 GMT

Hi,

How much RAM does a PA-5250 have? And which threshold value should be defined for alarming in SNMP Monitoring?

And what other oid make sense to monitor and which hreshold value?

e.g. count of Sessions: Data Sheet 8.000.000, but what would be a appropriate threshold value?

Thanks a lot

Robert

Re: threshold values for SNMP Monitoring PA-5250

reaper — Thu, 11 Apr 2019 13:18:41 GMT

The management plane has 32GB of which it uses 9GB. 90% usage would be alarming

the appropriate threshold of active sessions will depend on your traffic mix. I'd first establish a baseline and then set alerting if you go a considerable amount over that as that indicates an irregularity on your network vs trying to monitor the firewall when it maxes out because then you simply set it to 95%, but that doesn't tell you much

Re: threshold values for SNMP Monitoring PA-5250

regioiT — Mon, 15 Apr 2019 15:47:47 GMT

Hi and thanks for your response.

90% of 9 GB should be the alarming Threshold?

Our 5250 actually uses 4.5 GB of Memory

So i set

-w 6750 -c 8100 -l Memory -u MB

Max Sessions @ Datasheet 8.000.000

Our old 5050 max Sessions @ Datasheet 2.000.000 "died" at around 220.000 Sessions (average 900 byte per packet). No Limit of Datasheet has been reached.

So difficult to say and to baseline. I now just set warning to 800.000 and critical to 880.000.

Because of lack of performance and SNMP Monitoring features of our old PA-5050 we used Rest API for monitoring each core of the Firewall. But this API Request have slowed down the management plane, so we had to disable it.

So now we have the PA-5250.

Any other values (regarding to performance) to monitor?

regards

Robert